Logging for Fail2Ban

[therecluse26]

Logging for Fail2Ban

[therecluse26]

Hmm, interesting idea... I do wonder though how that would be integrated into checking against banned users on the web application, since fail2ban is a linux app. This would basically prevent users who fail from logging in through PHP-Login from being able to connect to your actual server through SSH, but it wouldn't prevent a jailed user from being able to log in through PHP-Login in the future from what I can see. This would also add another server-side dependency, which I would avoid if possible.

…

On Tue, Dec 27, 2016 at 12:34 PM, jb-alvarado ***@***.***> wrote: [Definition]

[jb-alvarado]

Hello therecluse26, I agree with you, I also would avoid another dependency. If you would like - a feature where users a able to activate logging with a comment that is possible to use this logging for fail2ban would be totally enough.

In my example above I have only the ports for http and https where fail2ban blocks, if an user had multiple times a wrong login. SSH would still work. But you have also the option to block the IP for all services.

As I see your prevention system goes on usernames. If I'm banned for some minutes, I can change to another user and I have a direct access again. Fail2ban banns IP addresses, which for me is better.